6. You will need to copy and paste all this(including ——Begin New Certificate Request —— and —–End New Certificate Request—-) to the certification authority.

7. Certificate authority will then send you a mail containing the required certificates and the signed public key.

8. You would observe 3 certificates.

9. Select the first certificate -> Click on View Certificate -> Click on details tab of that newly opened window -> Click on Copy to File -> Click next -> Choose the second option i.e Base 64 encoded -> Save it as “a.cer” under a folder in the domain directory.

10. Repeat the above step for the second and third certificate too and save it as b.cer and c.cer respectively.

11. Now go to that folder where you have saved the certificates and open the first certificate -> a.cer. If the “issued to” and “issued by” are same then that is the root certificate. So save it as “rootCA.cer”.

12. Now open b.cer. If the “issued to” is your CN name and “issued by” is the certification authority then this is your signed certificate. So save it as”supportcert.pem”

13. So the remaining certificate is intermediate certificate. So rename it as “intermediate.cer”

Note :- While saving the certificates , remember to enclose the name in inverted commas. Moreover , check that there shouldn’t be any whitespace characters.

14. Now , you need to form a chain of the certificates. For this , open the “supportcert.pem” in Edit mode. Check that there should not be any whitespace characters at the end. Press Enter. Press Save.

15. Open the “intermediate.cer” in Edit mode. Check that there are no whitespace characters at the end. Press Save. Then select the entire contents. Copy them and paste them at the end of “supportcert.pem”. Make sure that there are no whitespace characters. Save “supportcert.pem”.

16. Open the “rootCA.cer” in Edit mode. Check that there are no whitespace characters at the end. Press Save. Then select the entire contents. Copy them and paste them at the end of “supportcert.pem” (i.e after adding “intermediate.cer”). Make sure that there are no whitespace characters. Save “supportcert.pem”.

17. Now the “supportcert.pem” will comprise of the following :-

a. signed public key content

b. Then the intermediate certificate

c. Then the root certificate.

That is a chain of certificates is created. Now you can close the “supportcert.pem”

18. Goto the command prompt window and run the following command after setting the domain environment ( i.e. by executing . setEnv.cmd) :-